14 matches found
EUVD-2025-30651
Malicious code in bioql PyPI...
CVE-2025-57997
Missing Authorization vulnerability in Trustpilot Trustpilot Reviews trustpilot-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trustpilot Reviews: from n/a through = 2.5.925...
CVE-2025-57997
Missing Authorization vulnerability in Trustpilot Trustpilot Reviews trustpilot-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trustpilot Reviews: from n/a through = 2.5.925...
WordPress Trustpilot Reviews Plugin <= 2.5.925 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Que Thanh Tuan - Blue Rock in WordPress Plugin Trustpilot Reviews versions = 2.5.925...
CVE-2025-57997
CVE-2025-57997 is a Missing Authorization vulnerability in the WordPress plugin Trustpilot Reviews (Trustpilot Reviews) affecting versions up to 2.5.925. The description notes a misconfigured access control level enabling exploitation via unauthorized access, but the connected documents do not pr...
CVE-2025-57997 WordPress Trustpilot Reviews Plugin <= 2.5.925 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Trustpilot Trustpilot Reviews trustpilot-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trustpilot Reviews: from n/a through = 2.5.925...
CVE-2025-57997 WordPress Trustpilot Reviews Plugin <= 2.5.925 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Trustpilot Trustpilot Reviews trustpilot-reviews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Trustpilot Reviews: from n/a through = 2.5.925...
WordPress plugin Trustpilot Reviews 安全漏洞
WordPress and WordPress plugin are products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerability...
PT-2025-38847
Name of the Vulnerable Software and Affected Versions Trustpilot Trustpilot Reviews versions through 2.5.925 Description A missing authorization issue exists in Trustpilot Trustpilot Reviews, stemming from incorrectly configured access control security levels. This allows for unauthorized access...
5 star review funnel for Google Reviews, Trustpilot, ProvenExpert and more | RRatingg < 1.3.02 - Missing Authorization
Description The 5 star review funnel for Google Reviews, Trustpilot, ProvenExpert and more | RRatingg plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in all versions up to, and including, 1.2.67. This makes it possible for...
Malicious code in slack-trustpilot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b36837baf07f972cd50179927a17a7579649b0ef140fc5791737f20b977c9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6161 Malicious code in slack-trustpilot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 37b36837baf07f972cd50179927a17a7579649b0ef140fc5791737f20b977c9c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Trustpilot: IDOR in sending support email upon Verifying user business domain
Summary Trustpilot Business is making sure that you own the domain you have registered before continuing the process so they set 5 choices on how to verify. But there's another one, which is through sending a support ticket. By this you can send message to a support and hope to help you out. Ther...
ferratum.dk XSS vulnerability
Open Bug Bounty ID: OBB-607263 Description| Value ---|--- Affected Website:| ferratum.dk Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...